Marion County Health Department Notifies Clients of Privacy Breach

792 clients affected by unauthorized access to personal information

Jan. 30, 2026 at 7:31pm

Got story updates? Submit your updates here. ›

The Marion County Public Health Department (MCPHD) has notified 792 affected clients of unauthorized access to their personal information, including names, email addresses, dates of birth, and lab results. An MCPHD employee was found to have accessed more information than necessary to complete their job duties, violating the department's privacy policies.

Why it matters

This incident highlights the importance of healthcare organizations maintaining strict data privacy and security protocols to protect sensitive patient information. Breaches of this nature can erode public trust in the healthcare system and lead to potential identity theft or other misuse of personal data.

The details

The unauthorized access was discovered internally, and MCPHD is taking steps to strengthen technical safeguards, report the incident to federal authorities, and retrain staff on privacy policies. No financial information was involved, but the department is advising affected clients to monitor for any suspicious activity related to their health information.

  • The privacy breach was discovered on January 25, 2026.

The players

Marion County Public Health Department (MCPHD)

The local public health department responsible for providing health services and protecting the wellbeing of residents in Marion County, Indiana.

Lisa Taylor

Chief compliance officer for the Health & Hospital Corporation of Marion County, which oversees the MCPHD.

Got photos? Submit your photos here. ›

What they’re saying

“We regret this incident and any concerns it may cause to our clients, and to the community. Protecting client privacy is among our top priorities, and MCPHD is committed to earning and maintaining the public's trust.”

— Lisa Taylor, Chief compliance officer (wishtv.com)

What’s next

MCPHD is reporting the incident to the U.S. Department of Health and Human Services as required by law.

The takeaway

This breach underscores the need for healthcare organizations to have robust data privacy and security measures in place to protect sensitive patient information. Proactive steps to limit access, train staff, and transparently address incidents can help maintain public trust in the healthcare system.